Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: ktC3bmiew6EpPqp08E/TFlT615gwmhd4PhW3XfpxDo8=
Subject key identifier: B4:04:31:17:A1:A8:83:54:C8:B9:2E:75:74:84:51:43:4F:64:73:71
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 0198D5156772EC6645DCA9233E4AD8A1DD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 09B9
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: MY1VxmMKIbxjHrgyc+Ncq06nDXqNb/0ETY/fzrMTjP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:67:72:ec:66:45:dc:a9:23:3e:4a:d8:a1:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=b4043117a1a88354c8b92e75748451434f647371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:98:16:b4:84:e6:27:e1:a7:9c:81:fe:8b:
e0:e3:d9:5b:8d:de:80:01:1f:bd:dc:d0:1f:84:6b:
01:36:27:8e:00:b5:34:dd:07:88:c7:3a:a5:bf:f7:
15:fe:1a:2a:3c:5c:73:fe:8b:38:26:5f:c8:e9:fb:
66:d0:f4:09:16:7d:4d:05:8c:a1:ab:91:bc:27:77:
04:08:f1:34:6d:b8:25:a7:76:d0:8d:ca:d0:37:3c:
4f:69:72:9f:c7:f9:db:b8:a4:04:a4:71:95:01:28:
fb:45:49:13:53:24:32:17:88:29:82:7f:4f:84:d3:
6c:08:14:e9:e2:e0:ae:19:59:5b:2b:d9:73:ea:88:
70:e6:bb:28:c0:34:94:21:82:a7:38:8b:2d:69:d7:
dd:7a:97:d3:73:17:00:2a:95:d4:00:2a:c4:3b:74:
78:a8:4f:cf:90:fc:6b:bf:cb:07:3d:05:b2:06:59:
dc:ae:02:93:3a:e7:13:d8:15:1d:7c:6c:3d:29:6a:
88:3f:ca:af:91:6c:95:aa:6b:08:8e:32:c9:e9:91:
bd:8f:11:f4:a0:59:81:93:36:e6:fb:da:2b:a0:dd:
7e:57:84:53:6f:6a:5b:db:9e:95:56:a0:ba:af:16:
5d:c3:89:be:c7:cb:e6:fa:2c:fc:b9:a8:75:c0:59:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:31:17:A1:A8:83:54:C8:B9:2E:75:74:84:51:43:4F:64:73:71
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5a:de:41:f7:f3:9c:c5:a8:10:1e:68:3f:90:06:92:f6:1c:
19:99:d4:5a:17:d1:1f:db:b9:46:69:91:9f:8d:a7:ea:49:62:
d8:3e:3e:2b:4f:3e:a3:e0:ba:71:3d:e6:b6:8a:e2:08:bb:50:
2f:2d:3e:53:a0:07:2b:ca:89:e6:68:c9:75:77:d5:f5:f0:80:
3e:81:51:07:b1:47:7f:76:25:3d:71:67:89:26:a0:8a:97:52:
8a:27:17:73:70:fc:1e:cb:c3:29:ab:ee:c3:13:96:67:ae:5f:
bb:00:06:d9:d3:1f:4a:7e:bf:3e:3b:d4:a4:ab:ed:cc:df:da:
a2:9c:3a:ec:d2:67:a9:44:33:f7:36:08:80:48:46:3f:9c:38:
66:88:05:86:83:e2:78:05:52:90:e7:3c:31:61:62:50:43:3e:
81:c3:5f:51:53:ab:c1:d1:9b:6f:14:56:58:fa:63:5a:10:b3:
a8:52:7a:29:1e:8c:91:6a:bc:3e:1a:31:ce:b3:ef:b5:b2:1e:
ff:ba:42:7c:7b:3f:ab:b2:9d:25:89:8d:be:45:d5:44:10:81:
36:e4:76:3f:4e:ec:78:1f:9a:73:7a:c6:6c:e9:fb:3e:eb:cd:
75:f2:c7:19:2b:50:5b:44:c4:f7:10:19:61:c2:51:03:e6:3f:
2f:58:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:13 2025 by rpki-client